Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File:                     IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier:          86gpohU5Ljch7AqqzK0u80Kx/GyCgASlgU8ett67z4c=
Subject key identifier:   C5:A8:6B:C2:89:AF:09:4F:AA:27:D8:1E:16:B0:C7:3D:28:89:7A:B7
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       019D9850191C065689903BD4E18571F96F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number:          18C5
Signing time:             Thu 16 Apr 2026 22:01:19 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:19 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:19 +0000
Files and hashes:         1: 4Yk_IaIMOFlSvQlmWzU3D7V9Ww0.roa (hash: 95l63lLqTUI0fetfFavGHFZZGMfnTIwSEKulFFxrxpc=)
                          2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: F1u2OFVle16VqR7EHJ7k9De+uOhWTZVzWLr5iXRomCw=)
                          3: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (hash: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4=)
                          4: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (hash: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY=)
                          5: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (hash: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38=)
                          6: ogEjhX2zW6tgVtz_pOmSPCqvyBk.roa (hash: dF9i4unUQNdYa+sgOQav50pelR9XCvdYshIMM/dzsiM=)
                          7: sD8yyKxgqD60hgzKcX-gPGQxeh4.roa (hash: //5uDqVbcxyKWzTpZS8757S/2Ry/Wbbw/UQbM8VY0LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:19:1c:06:56:89:90:3b:d4:e1:85:71:f9:6f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: Apr 16 22:01:19 2026 GMT
            Not After : Apr 17 22:01:19 2026 GMT
        Subject: CN=c5a86bc289af094faa27d81e16b0c73d28897ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:2c:0d:b5:60:30:2e:26:ea:18:dc:8e:14:
                    b8:f9:93:1d:53:a3:c2:f8:58:4c:97:a7:f7:96:96:
                    2e:c8:fe:4d:82:75:b3:85:3d:df:bc:0d:68:8b:cb:
                    05:3a:bc:b4:43:97:75:45:b4:cc:94:43:c6:54:18:
                    3f:f3:10:0f:1e:c1:f9:64:7f:cd:0f:33:ef:e2:a0:
                    61:4a:df:37:50:9c:6b:49:ab:6d:4d:c6:28:21:7a:
                    c1:ec:67:2b:3e:a0:8e:3c:e3:be:ed:11:6f:b9:83:
                    54:ca:3b:98:69:8b:98:43:6e:74:7b:09:d3:6d:59:
                    01:50:50:a0:bd:6e:34:9c:b0:c2:6e:1e:88:68:d9:
                    af:d4:ea:8f:6c:34:b3:48:b8:49:59:2f:e9:47:34:
                    d4:c1:b4:be:32:04:eb:be:b7:ca:23:0b:63:42:f0:
                    fc:cd:79:77:47:a9:fa:69:17:ad:9c:df:4e:0f:5e:
                    67:d8:bf:0c:9f:c9:50:e4:43:1e:77:17:24:e9:a8:
                    6f:c6:ef:74:24:ed:82:45:ef:99:71:f1:17:e4:0f:
                    23:f3:06:30:8f:ad:71:93:f3:57:1d:c1:6e:ae:06:
                    31:13:36:f4:9b:d6:6d:3f:40:62:b0:5e:d0:a6:27:
                    e9:83:8c:21:ec:3b:30:ea:e4:43:f2:b2:1b:a7:35:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:6B:C2:89:AF:09:4F:AA:27:D8:1E:16:B0:C7:3D:28:89:7A:B7
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:c7:cb:01:d0:62:6e:25:f3:19:84:79:3f:56:7a:61:0c:
         b0:7c:01:bd:4c:78:51:be:51:f5:d4:ae:0d:04:dc:9e:b4:c6:
         d8:83:c1:0a:0a:41:9b:fb:c7:65:c1:07:68:72:f8:01:f5:5b:
         1b:54:7d:3f:da:a8:f6:92:79:b6:ae:1e:11:32:bc:5e:21:80:
         0b:c6:c1:4e:02:87:9a:ba:d3:2f:44:1d:e4:ff:70:bf:27:ad:
         c7:45:dc:27:d7:9b:1b:b1:66:71:ec:f7:da:68:e0:a4:1f:30:
         58:48:d1:7c:62:54:44:37:12:f6:c3:55:14:fd:1e:50:4b:0f:
         eb:29:96:40:8b:51:78:72:62:7c:f3:35:de:4c:b4:49:7a:80:
         e2:af:46:d5:d2:00:d4:1e:1c:f5:bf:30:fe:d9:f6:1f:95:3b:
         f6:6e:ab:9c:97:8c:5f:dd:3e:bc:34:9f:6c:5f:78:c1:eb:45:
         8b:5d:b5:8a:3b:41:f8:81:43:fb:50:e6:14:50:8b:2f:93:71:
         88:55:51:f3:52:fe:ba:50:d8:a8:36:24:33:7e:c7:40:91:ae:
         7d:3e:e2:1f:bb:7e:96:f4:78:0b:3c:d3:5b:c9:b2:93:81:2c:
         47:9f:b2:fd:e9:1e:01:a7:54:75:a7:22:8f:01:4e:7b:38:93:
         bd:b7:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:02 2026 by rpki-client